Search

Find a vulnerability

Search criteria ⓘ Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.

    2 vulnerabilities by openrundev

    CVE-2026-55252 (GCVE-0-2026-55252)

    Vulnerability from nvd – Published: 2026-10-01 19:52 – Updated: 2026-10-01 19:52
    VLAI
    Title
    OpenRun: Redirect URL validation bypass using //host paths leads to Open Redirect
    Summary
    OpenRun is an open-source, self-hosted GitOps platform for deploying web apps and internal tools to Docker or Kubernetes. Prior to version 0.17.7, the restrictions on redirect URLs in openrun can be bypassed by attackers, leading to open redirect attacks. This issue has been patched in version 0.17.7.
    Severity
    5.1 (Medium)
    CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:N/SA:N
    CWE
    • CWE-601 - URL Redirection to Untrusted Site ('Open Redirect')
    Assigner
    References
    Impacted products
    Vendor Product Version
    openrundev openrun Affected: < 0.17.7
    		Create a notification for this product.
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "openrun",
          "vendor": "openrundev",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 0.17.7"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "OpenRun is an open-source, self-hosted GitOps platform for deploying web apps and internal tools to Docker or Kubernetes. Prior to version 0.17.7, the restrictions on redirect URLs in openrun can be bypassed by attackers, leading to open redirect attacks. This issue has been patched in version 0.17.7."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 5.1,
            "baseSeverity": "MEDIUM",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "LOW",
            "subIntegrityImpact": "NONE",
            "userInteraction": "ACTIVE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-601",
              "description": "CWE-601: URL Redirection to Untrusted Site (\u0027Open Redirect\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-01T19:52:31.031Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/openrundev/openrun/security/advisories/GHSA-h5g6-xmh4-hc37",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/openrundev/openrun/security/advisories/GHSA-h5g6-xmh4-hc37"
        },
        {
          "name": "https://github.com/openrundev/openrun/commit/709da784fcf1311c85f30f3542cfa3601a78bbf0",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/openrundev/openrun/commit/709da784fcf1311c85f30f3542cfa3601a78bbf0"
        },
        {
          "name": "https://github.com/openrundev/openrun/releases/tag/v0.17.7",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/openrundev/openrun/releases/tag/v0.17.7"
        }
      ],
      "source": {
        "advisory": "GHSA-h5g6-xmh4-hc37",
        "discovery": "UNKNOWN"
      },
      "title": "OpenRun: Redirect URL validation bypass using  //host  paths leads to Open Redirect"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-55252",
    "datePublished": "2026-10-01T19:52:31.031Z",
    "dateReserved": "2026-06-16T16:44:00.625Z",
    "dateUpdated": "2026-10-01T19:52:31.031Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-55252 (GCVE-0-2026-55252)

    Vulnerability from cvelistv5 – Published: 2026-10-01 19:52 – Updated: 2026-10-01 19:52
    VLAI
    Title
    OpenRun: Redirect URL validation bypass using //host paths leads to Open Redirect
    Summary
    OpenRun is an open-source, self-hosted GitOps platform for deploying web apps and internal tools to Docker or Kubernetes. Prior to version 0.17.7, the restrictions on redirect URLs in openrun can be bypassed by attackers, leading to open redirect attacks. This issue has been patched in version 0.17.7.
    Severity
    5.1 (Medium)
    CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:N/SA:N
    CWE
    • CWE-601 - URL Redirection to Untrusted Site ('Open Redirect')
    Assigner
    References
    Impacted products
    Vendor Product Version
    openrundev openrun Affected: < 0.17.7
    		Create a notification for this product.
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "openrun",
          "vendor": "openrundev",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 0.17.7"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "OpenRun is an open-source, self-hosted GitOps platform for deploying web apps and internal tools to Docker or Kubernetes. Prior to version 0.17.7, the restrictions on redirect URLs in openrun can be bypassed by attackers, leading to open redirect attacks. This issue has been patched in version 0.17.7."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 5.1,
            "baseSeverity": "MEDIUM",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "LOW",
            "subIntegrityImpact": "NONE",
            "userInteraction": "ACTIVE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-601",
              "description": "CWE-601: URL Redirection to Untrusted Site (\u0027Open Redirect\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-01T19:52:31.031Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/openrundev/openrun/security/advisories/GHSA-h5g6-xmh4-hc37",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/openrundev/openrun/security/advisories/GHSA-h5g6-xmh4-hc37"
        },
        {
          "name": "https://github.com/openrundev/openrun/commit/709da784fcf1311c85f30f3542cfa3601a78bbf0",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/openrundev/openrun/commit/709da784fcf1311c85f30f3542cfa3601a78bbf0"
        },
        {
          "name": "https://github.com/openrundev/openrun/releases/tag/v0.17.7",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/openrundev/openrun/releases/tag/v0.17.7"
        }
      ],
      "source": {
        "advisory": "GHSA-h5g6-xmh4-hc37",
        "discovery": "UNKNOWN"
      },
      "title": "OpenRun: Redirect URL validation bypass using  //host  paths leads to Open Redirect"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-55252",
    "datePublished": "2026-10-01T19:52:31.031Z",
    "dateReserved": "2026-06-16T16:44:00.625Z",
    "dateUpdated": "2026-10-01T19:52:31.031Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}